Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yc6MWgAL1OJ6nFw7YCfPHcpqlzY.roa
File: Yc6MWgAL1OJ6nFw7YCfPHcpqlzY.roa (raw, json)
Hash identifier: +d//EHJcCv0lPGcz/qJ4XybsSsp8HDqP2UgXSoQSiow=
Subject key identifier: 61:CE:8C:5A:00:0B:D4:E2:7A:9C:5C:3B:60:27:CF:1D:CA:6A:97:36
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0184AB4647869A1DDB55714DC7322E166ACF
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yc6MWgAL1OJ6nFw7YCfPHcpqlzY.roa
Signing time: Thu 24 Nov 2022 20:13:40 +0000
ROA not before: Thu 24 Nov 2022 20:13:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:184:9f03:9814/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ab:46:47:86:9a:1d:db:55:71:4d:c7:32:2e:16:6a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Nov 24 20:13:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61ce8c5a000bd4e27a9c5c3b6027cf1dca6a9736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:99:d3:25:2f:13:20:79:a4:1e:59:9d:ec:f8:
75:10:f0:66:14:5d:b3:f9:49:ca:b7:09:18:d7:14:
60:f4:dc:0d:ea:cc:a2:7f:79:5c:e5:9a:8c:5c:48:
75:ff:f8:25:e9:43:30:b5:61:89:99:c1:3a:36:d9:
e6:c8:74:59:a8:b7:c5:cb:9e:75:e7:8b:e4:e2:e2:
74:07:fb:fd:b6:d0:18:f5:79:42:07:5f:98:7c:6f:
bc:0d:6e:37:e0:88:b9:48:d2:25:21:61:17:13:2a:
97:f1:12:be:d1:b5:76:2a:a8:c9:32:c5:6f:24:72:
2c:0a:5a:2e:9e:c5:0a:53:9c:e8:68:90:3d:2c:fd:
d7:2c:b1:ad:04:9c:48:ab:4f:68:05:e5:43:a4:7e:
a9:50:3a:3d:0c:de:19:4a:2c:92:25:09:97:ff:90:
23:40:4b:b8:3e:23:36:ed:76:07:b4:9e:a7:e9:53:
cd:72:3e:4b:fd:17:a9:5e:4f:2c:56:74:e1:df:cb:
5a:3d:ac:6f:9d:24:ac:35:5a:dc:96:cf:79:f8:fd:
cf:d3:2f:4b:63:af:43:66:40:71:2d:51:93:cb:0f:
fe:bb:fc:79:88:11:5f:97:31:7b:bd:f8:87:8a:2d:
f3:6f:92:c8:e8:56:6b:03:ed:fa:63:d4:78:00:83:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CE:8C:5A:00:0B:D4:E2:7A:9C:5C:3B:60:27:CF:1D:CA:6A:97:36
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/Yc6MWgAL1OJ6nFw7YCfPHcpqlzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3a:8d:fa:78:11:61:7c:8f:8f:2d:d6:96:18:94:23:59:e9:42:
a1:39:81:55:45:6c:f6:d4:cd:e0:b3:d0:3e:8d:c7:69:13:28:
f5:16:55:13:d5:e6:33:ef:7c:49:5a:bf:46:99:f5:b1:fa:41:
3f:14:30:0f:c4:fa:fa:9f:34:f7:8c:39:f7:2e:d9:f7:ac:ef:
97:7c:70:cd:03:b9:0a:68:e0:f8:53:ea:09:10:24:81:2c:69:
9e:d9:29:24:77:a5:1b:f9:b5:3c:60:3c:94:a2:c6:66:9f:7e:
a4:4c:53:40:4b:a5:27:63:9f:fe:24:73:92:90:ac:a7:ff:fe:
d4:70:df:ad:ad:b9:cf:e4:8b:9e:f1:cf:58:66:6a:8b:86:02:
e8:ce:2e:b8:3a:8b:f5:c5:08:f8:00:64:3f:ad:a8:89:be:6d:
e9:52:63:11:70:0a:79:cf:03:3d:9e:39:e5:63:4c:75:60:ab:
75:7c:ab:e7:34:6e:10:33:bc:27:e6:a8:47:c9:d1:0c:6b:35:
9a:5f:dd:d6:5c:9f:2d:7b:3b:af:3b:02:86:ad:54:99:77:2f:
dd:9d:62:21:2b:45:c0:0b:52:0d:82:1a:44:97:01:a4:dd:10:
3c:47:cf:48:02:0b:fd:19:a0:27:4b:fc:7a:31:4b:db:77:d7:
ff:66:a0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 23:47:45 2025 by rpki-client